Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json)
Hash identifier: vRPPJ8Vv3a4ysja1sjIRl0OQmp85K6xYrTJs7KFqAQ4=
Subject key identifier: EB:6B:71:7D:13:3C:B2:99:B8:4D:A0:36:65:2C:30:F4:67:9E:54:CC
Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9
Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9
Certificate serial: 0951
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
Manifest number: 0948
Signing time: Thu 30 Jan 2025 19:49:29 +0000
Manifest this update: Thu 30 Jan 2025 19:49:28 +0000
Manifest next update: Thu 06 Feb 2025 19:49:28 +0000
Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: Jnn+pNFNRkUAFt8Jb5n+a2xfumRAmxbFLe0iLCMZJZg=)
2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: JcavRD/UkGMKefo40xrhCPb2PgEwMsvZQrFanuv4C9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385 (0x951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9
Validity
Not Before: Jan 30 19:49:28 2025 GMT
Not After : Feb 6 19:49:28 2025 GMT
Subject: CN=679bd7c8-a261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:f1:6e:39:65:64:81:e2:ac:57:d3:d1:cb:
be:17:e7:7f:ee:52:c1:d6:7e:14:08:a4:05:da:1c:
80:cf:2d:b1:cd:90:f2:28:69:44:df:fd:00:46:78:
48:27:f4:4b:b9:60:93:b9:e8:c1:e5:27:be:69:29:
9b:fc:5e:1e:65:68:11:cf:48:78:de:9c:e7:a9:7a:
00:cf:77:c1:3f:2a:1f:03:d1:7f:76:6c:ca:e4:b3:
60:f1:75:9a:fa:e0:40:6c:30:95:b8:ff:55:5f:2e:
42:72:5b:a9:87:ff:9f:c4:1f:2e:bb:1b:2d:8c:a2:
53:8b:f3:4e:db:92:9c:23:49:8d:75:f5:33:d4:ac:
25:f2:cb:c0:98:bb:31:0d:91:54:74:82:09:ca:1a:
14:44:c4:66:ee:ca:23:60:d7:c0:a7:7e:18:46:a1:
0c:dd:a5:ff:16:00:47:a4:ea:05:82:05:f7:3f:54:
ca:a1:46:4e:b3:0c:b9:59:ad:7f:3f:a0:e8:fb:ac:
af:21:0f:3a:8d:20:b1:f7:2f:15:ea:23:81:fa:87:
5b:c7:d3:55:4a:8e:e7:6d:3b:22:bb:b2:a2:e4:f7:
e4:64:ec:36:23:72:6e:9d:27:88:91:f6:16:ad:45:
6d:67:c3:24:49:1d:ec:b3:0a:ce:cf:e8:d0:66:a0:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:71:7D:13:3C:B2:99:B8:4D:A0:36:65:2C:30:F4:67:9E:54:CC
X509v3 Authority Key Identifier:
keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3f:03:6c:30:f4:ca:34:df:ad:74:bf:88:2e:6e:7a:fd:ce:
12:12:b7:ec:56:0d:8f:27:90:a4:08:49:d7:09:86:22:28:67:
17:a4:14:b7:92:76:62:d5:23:b1:6e:c8:b9:c2:44:ff:0a:1b:
c9:9a:d3:dd:7c:37:f0:78:8e:cd:d1:fa:11:bf:60:c6:d5:1f:
8b:53:9e:de:ce:9b:9c:e9:17:fe:44:5e:f1:64:d2:1e:2a:69:
0a:0c:10:39:78:d9:4f:d6:34:d1:f1:52:d5:1d:a5:08:f2:7e:
6c:33:33:78:85:4b:12:df:8b:fc:a6:a2:13:e7:d2:fd:77:66:
81:1f:97:42:22:f2:6a:6d:ed:ab:c1:d2:50:d3:bc:0f:92:6a:
cd:c8:de:c8:34:a9:f2:b3:e4:80:eb:0f:a9:38:f2:d8:ea:c7:
40:22:48:45:b7:de:4c:3b:4d:61:af:bc:00:bc:df:83:51:9a:
bf:72:7c:8f:5a:5f:ab:fb:c8:ba:42:36:b1:4a:d8:55:29:fd:
65:35:46:a6:71:c3:6e:e4:92:62:f3:27:45:4a:62:b8:44:1e:
ef:4f:df:f9:be:62:4b:1c:3e:16:eb:a6:b7:a6:32:fd:80:36:
78:31:38:51:80:d1:22:ff:a4:79:8a:9b:66:6d:47:94:8d:e6:
8f:90:7d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:56 2025 by rpki-client